Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/d9d82d-1ca4-4824-a92c-ca55efc7752d/1/MQ4un7cGaMeWrc6HeyHgmooa0Ck.mft
File: MQ4un7cGaMeWrc6HeyHgmooa0Ck.mft (raw, json)
Hash identifier: 8V/bfAWE3hVS2Tq8EO+Ou5QOe0QjvVe6/tNZ+hmgpBE=
Subject key identifier: ED:3E:96:8A:11:43:6D:A5:08:2A:F5:8D:F0:01:AD:8C:30:BA:48:9D
Authority key identifier: 31:0E:2E:9F:B7:06:68:C7:96:AD:CE:87:7B:21:E0:9A:8A:1A:D0:29
Certificate issuer: /CN=310e2e9fb70668c796adce877b21e09a8a1ad029
Certificate serial: 01976CCF752748736688B1F83F6AB294B608
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MQ4un7cGaMeWrc6HeyHgmooa0Ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/d9d82d-1ca4-4824-a92c-ca55efc7752d/1/MQ4un7cGaMeWrc6HeyHgmooa0Ck.mft
Manifest number: 0D8E
Signing time: Sat 14 Jun 2025 05:00:24 +0000
Manifest this update: Sat 14 Jun 2025 05:00:24 +0000
Manifest next update: Sun 15 Jun 2025 05:00:24 +0000
Files and hashes: 1: MQ4un7cGaMeWrc6HeyHgmooa0Ck.crl (hash: A7DTjhrgOl4cJNtGQEVGYLmqy4L6AZLiLfmuPbZBiYg=)
2: QXjAwQSpvYGLG9EKG43DcrvrWjg.roa (hash: /g3NGPvML9niLWrxGUEsCrw0JcuhbxCMPrgB31IKq7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/d9d82d-1ca4-4824-a92c-ca55efc7752d/1/MQ4un7cGaMeWrc6HeyHgmooa0Ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/d9d82d-1ca4-4824-a92c-ca55efc7752d/1/MQ4un7cGaMeWrc6HeyHgmooa0Ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/MQ4un7cGaMeWrc6HeyHgmooa0Ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:75:27:48:73:66:88:b1:f8:3f:6a:b2:94:b6:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=310e2e9fb70668c796adce877b21e09a8a1ad029
Validity
Not Before: Jun 14 05:00:24 2025 GMT
Not After : Jun 15 05:00:24 2025 GMT
Subject: CN=ed3e968a11436da5082af58df001ad8c30ba489d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:76:cb:0e:68:8f:e3:79:2c:a2:25:35:25:cb:
22:60:4e:50:1f:32:4c:02:e0:cc:19:dc:70:f6:7c:
f3:be:22:95:44:54:08:3a:2c:03:7c:6e:fe:3f:8e:
95:6c:6f:8c:cd:de:5b:bb:4f:84:6c:4b:a6:13:d1:
0f:0d:89:ff:5f:2e:a9:f3:56:c0:b4:aa:b1:77:a9:
c8:a5:de:27:ff:90:ee:3c:95:68:86:9c:57:35:1e:
8d:7f:b5:4e:0a:57:9b:d8:5c:ec:04:9b:3c:28:aa:
de:04:0e:00:9c:ea:95:72:17:16:65:cc:48:42:89:
22:44:88:cf:6b:e2:0e:30:3e:71:44:78:a3:e6:50:
a8:52:7e:ee:56:11:ba:c7:18:f3:84:f2:81:85:71:
86:66:fd:b2:45:40:a0:12:a4:1b:a2:66:37:44:2d:
16:f5:00:aa:1b:91:09:fa:a4:5b:7c:e1:c1:a4:31:
c3:6f:fb:b3:ca:0d:61:25:9e:21:50:42:f1:23:6e:
ee:60:b9:1b:4c:6b:f8:f0:88:e0:b0:45:7c:b7:9f:
a3:4e:fd:93:32:9e:c7:4c:4e:57:ad:5a:87:f9:f3:
59:54:47:4e:4c:f3:b6:2c:3a:a4:8a:d9:2c:aa:25:
1e:af:04:03:c7:91:6c:20:a7:3f:d7:d2:3d:b0:04:
fe:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:3E:96:8A:11:43:6D:A5:08:2A:F5:8D:F0:01:AD:8C:30:BA:48:9D
X509v3 Authority Key Identifier:
keyid:31:0E:2E:9F:B7:06:68:C7:96:AD:CE:87:7B:21:E0:9A:8A:1A:D0:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MQ4un7cGaMeWrc6HeyHgmooa0Ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/d9d82d-1ca4-4824-a92c-ca55efc7752d/1/MQ4un7cGaMeWrc6HeyHgmooa0Ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/d9d82d-1ca4-4824-a92c-ca55efc7752d/1/MQ4un7cGaMeWrc6HeyHgmooa0Ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:75:6e:7d:7b:a1:8b:d5:f0:14:aa:0a:cc:00:91:e9:2e:bd:
90:b2:69:fe:04:d0:21:6b:ec:75:fc:11:f3:d4:9b:5d:95:2c:
50:87:33:6a:66:3c:f0:00:ab:61:b8:e9:40:64:94:bf:a8:41:
df:5e:ab:8e:b4:5d:80:30:62:ee:ce:69:3a:ab:d8:c0:12:e6:
a1:77:10:45:de:5d:bd:95:71:62:b8:32:4d:1a:eb:b0:ac:0a:
a3:1d:a3:c0:63:2e:cb:45:f0:e0:30:00:dc:20:4e:5c:29:5b:
e7:cb:cd:c2:8a:b1:c9:09:5a:c4:5d:9c:06:35:40:74:36:b5:
43:06:23:2c:d4:92:20:20:ae:a4:d6:99:10:35:87:c9:68:de:
56:89:39:56:07:0d:d5:f1:dd:83:dc:aa:4f:fa:c9:22:94:41:
02:31:db:ef:d2:ad:aa:6a:ca:28:d4:64:48:29:a4:39:82:45:
ac:45:fd:f5:a8:30:46:ad:d5:10:70:e4:09:24:19:d2:11:25:
57:28:4f:9f:61:1c:2f:fd:48:6d:f7:bb:7a:2c:12:c3:e7:75:
6e:56:bd:1d:a3:cf:c7:9e:b9:02:ea:2a:20:4a:b5:6b:12:a3:
f9:ea:11:43:b6:8f:2c:5f:6b:2c:f3:75:77:2d:eb:a8:eb:26:
05:3c:34:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:08:35 2025 by rpki-client